Root of Trust
The Security Admin BEAM is the highest privilege plane in OS.1. It directly communicates with hardware TPM 2.0 modules and manages the Certificate Authority (CA) root keys. Long-term keys never leave this plane. All operations requiring signing or decryption are performed securely via IPC/SCM_RIGHTS channels initiated by the Control Plane.
TSS
TPM 2.0 and hardware crypto integration via highly audited Erlang NIFs and drivers.
% TSS TPM2 Sign
sign(KeyHandle, Digest) ->
case tpm2:sign(KeyHandle, Digest) of
{ok, Signature} -> Signature;
{error, _} -> exit(tpm_error)
end.
CA
Root and intermediate Certificate Authorities. Issue, revoke, and manage X.509 lifecycles strictly within the trusted zone.
AU
High-assurance Audit plane. Append-only, cryptographically signed logs ensuring non-repudiation of all privileged actions.